Error: Unsupported extension
(Error code 3c16e2)
Possible sources
This error originated from one of the following locations within the iPXE source code:
General advice
- Try using the latest version of iPXE. Your problem may have already been fixed.
- Try building iPXE with the debug option
DEBUG=x509 - You can contact the iPXE developers and other iPXE users.
- Refresh this page after 24 hours. This page is actively monitored, and further information may be added soon.
Additional notes
(Please edit this page to include any of your own useful hints and tips for fixing this error.)
Certificate in chain have an extension that is marked as critical that iPXE don't support. Consider if this extension should be critical and if not change it and reissue certificate. If it really needs to be critical then some development will be needed in iPXE, the certificate or at least extension needs to be sent to a developer. (You need to enabled DEBUG as described above to see exactly what fails)
Since the output can be quite verbose consider sending this to syslog or serial.
Another option is to run the linux binary of iPXE which usually gives you a friendlier interface to get text from:
make -C src bin-x86_64-linux/ipxe.linux DEBUG=x509 src/bin-x86_64-linux/ipxe.linux --net slirp
To decode your certificate you can use services such as https://asn1js.eu/
